 
    })
 
-;; TODO - Record any fields that are left out, or any squashing in the code
 ;; TODO - Write up transforms and variations in the README, include notes for serialization
 ;; TODO - Add NewIncident and StoredIncident
 (s/defschema Incident

              [ring.swagger.schema :refer [coerce!]]))

;; TODO - README for each section

;; References
(def COAReference m/Reference)

    ;; structured data such as confidence and source for each element).
    (s/optional-key :related_indicators) [m/Reference]
    (s/optional-key :related_observables) [m/Reference]
    (s/optional-key :leveraged_TTPs) [m/Reference]
    (s/optional-key :attributed_actors) [m/Reference] ;; was attributed_threat_actors
    (s/optional-key :related_incidents) [m/Reference]
    (s/optional-key :intended_effect) m/IntendedEffect
